According to claims on Reddit, this malware can re-enable "Allow installing untrusted apps" checkbox after user unchecks it. This and it's ability to survive f

According to claims on Reddit, this malware can re-enable "Allow installing untrusted apps" checkbox after user unchecks it. This and it's ability to survive factory reset may indicate, that xhelper can gain complete control over device (probably via improperly built firmware or unpatched root exploits). No amount of sandbox enhancements can stop this kind of priviledge escalation.